Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft
File:                     EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft (raw, json)
Hash identifier:          02Y2itIlrAB+21ER2FnsA+aRVmR4LL/ctIeVHP2eBO8=
Subject key identifier:   B6:2E:F7:D4:1A:87:3B:2E:DA:80:F5:B7:9C:01:B5:28:43:CC:6C:19
Authority key identifier: 10:A3:0C:D0:73:5C:0F:0D:68:FF:76:F8:9B:5F:F0:67:92:D4:8A:05
Certificate issuer:       /CN=10a30cd0735c0f0d68ff76f89b5ff06792d48a05
Certificate serial:       018B3713982C0CA8A1C79B06504301D741D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKMM0HNcDw1o_3b4m1_wZ5LUigU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft
Manifest number:          0873
Signing time:             Mon 16 Oct 2023 06:01:52 +0000
Manifest this update:     Mon 16 Oct 2023 06:01:52 +0000
Manifest next update:     Tue 17 Oct 2023 06:01:52 +0000
Files and hashes:         1: EKMM0HNcDw1o_3b4m1_wZ5LUigU.crl (hash: KIigyO+y3UMCCTgI2P6Avjd21sbiGJOhDV5CwCCN7RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:37:13:98:2c:0c:a8:a1:c7:9b:06:50:43:01:d7:41:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a30cd0735c0f0d68ff76f89b5ff06792d48a05
        Validity
            Not Before: Oct 16 06:01:52 2023 GMT
            Not After : Oct 17 06:01:52 2023 GMT
        Subject: CN=b62ef7d41a873b2eda80f5b79c01b52843cc6c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:06:c6:3c:76:63:75:7e:72:fc:38:40:97:
                    77:53:9e:be:88:6a:29:61:a4:33:99:0e:c1:09:b0:
                    a5:03:b2:a8:44:05:7e:0e:2e:94:32:6e:9e:4d:9e:
                    50:1e:59:c5:44:65:7e:db:cb:7e:75:f5:6f:6c:90:
                    ab:d3:26:36:2b:ad:de:4f:12:c8:02:ee:74:e9:58:
                    8c:10:ca:27:06:e0:79:4f:5e:c0:ce:41:95:50:47:
                    ad:8a:54:63:71:4c:dd:e4:24:89:8d:a5:19:cf:69:
                    e8:2d:ff:7c:d5:d4:fd:b9:11:4c:71:b1:05:bf:46:
                    d6:d7:f3:f3:54:c0:00:0b:a0:89:0f:dd:a3:56:1c:
                    44:ea:a5:6a:48:c2:6d:d7:65:2c:a8:d8:2d:ba:b9:
                    02:25:dc:6f:71:37:19:0b:c1:57:82:a8:6a:3d:99:
                    69:81:b4:c3:41:72:dd:59:3b:ca:6e:f5:82:c8:d0:
                    ab:bc:a7:4a:8f:14:47:41:e5:25:43:40:12:95:e0:
                    27:47:55:1a:56:d8:28:2c:97:43:ee:db:65:32:41:
                    a0:88:43:08:ef:7b:13:0b:e8:72:0f:87:4b:96:15:
                    a3:7e:c3:76:90:b8:55:45:32:f8:84:0a:30:e6:df:
                    ef:ac:a3:c4:99:a7:11:5f:5d:34:d0:78:27:3d:00:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:F7:D4:1A:87:3B:2E:DA:80:F5:B7:9C:01:B5:28:43:CC:6C:19
            X509v3 Authority Key Identifier:
                keyid:10:A3:0C:D0:73:5C:0F:0D:68:FF:76:F8:9B:5F:F0:67:92:D4:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKMM0HNcDw1o_3b4m1_wZ5LUigU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7d1dc-6467-4ca5-ba8c-ea816336769d/1/EKMM0HNcDw1o_3b4m1_wZ5LUigU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:73:db:b1:f9:5d:ee:1d:d3:2d:f4:a2:0e:3f:5a:98:69:
         3b:35:ab:0a:3e:9a:15:8f:e8:e7:c0:38:e3:14:77:eb:4f:80:
         f6:fe:61:85:17:b6:9c:7f:10:dd:0c:e3:80:bb:30:cb:da:dc:
         7d:32:13:f7:80:b8:d1:a1:74:21:d4:72:06:b1:43:f0:14:ff:
         d6:f2:ea:cf:a0:c5:91:01:fc:3d:0c:4e:3e:e0:48:89:a0:b0:
         30:6a:aa:83:53:00:b6:16:24:44:a2:b2:28:2c:90:00:0e:33:
         1b:8a:f2:7c:b4:f0:5c:0f:55:e6:b4:44:e9:43:b4:5a:5d:db:
         93:5d:2b:01:84:e2:17:2d:bd:b7:0e:ae:b4:35:92:9d:7b:3d:
         95:58:ae:da:fd:e4:44:38:d6:14:16:8c:af:3d:8d:f3:bd:85:
         06:ef:27:96:22:cc:1f:1e:b7:0d:80:03:07:ad:a9:61:df:55:
         18:eb:5c:7d:3a:4c:f5:63:19:63:ad:70:29:54:5d:51:b7:4f:
         24:9e:4d:26:63:e2:ce:8d:b9:68:14:f8:62:97:4b:78:d8:91:
         e0:70:8f:fa:30:aa:a9:d6:52:18:91:b9:8d:8c:18:2e:64:9e:
         0b:d1:47:89:a9:ce:72:9a:ff:59:87:3c:86:06:b3:f2:01:f0:
         50:c7:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----